firewall/ipt-server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Drop traffic on extern interfaces iinto private networks.

Browse Source
This commit is contained in:
Christoph
2021-09-02 12:07:25 +02:00
parent c65e0102ae
commit c78edd01be
4 changed files with 55 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
ip6t-firewall-server
View File

@ -1023,6 +1023,30 @@ done
echo_done
# ---
# - Don't allow traffik into Unique local network (ULA)
# ---
echo ""
echononl "\tDon't allow traffic into Unique local network (ULA)"
if $log_private_network_out || $log_all ; then
for _dev in ${ext_if_arr[@]} ; do
$ip6t -A OUTPUT -o $_dev -d $ula_block -j $LOG_TARGET $tag_log_prefix "$log_prefix Spoofing Out: "
if $kernel_forward_between_interfaces ; then
$ip6t -A FORWARD -o $_dev -d $ula_block -j $LOG_TARGET $tag_log_prefix "$log_prefix Spoofing Out: "
fi
done
fi
for _dev in ${ext_if_arr[@]} ; do
$ip6t -A OUTPUT -o $_dev -d $ula_block -j DROP
if $kernel_forward_between_interfaces ; then
$ip6t -A FORWARD -o $_dev -d $ula_block -j DROP
fi
done
echo_done
# -------------
# --- Services
# -------------